Lucene search

K
cvelistSonicwallCVELIST:CVE-2023-41712
HistoryOct 17, 2023 - 10:26 p.m.

CVE-2023-41712

2023-10-1722:26:09
CWE-121
sonicwall
www.cve.org
1
sonicos
ssl vpn
buffer overflow
stack-based
url endpoint
firewall crash

EPSS

0.001

Percentile

21.9%

SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "Management",
      "SSLVPN"
    ],
    "product": "SonicOS",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.1-5119 and earlier versions"
      },
      {
        "status": "affected",
        "version": "7.0.1-5129 and earlier versions"
      },
      {
        "status": "affected",
        "version": "6.5.4.4-44v-21-2079 and earlier versions"
      },
      {
        "status": "affected",
        "version": "6.5.4.12-101n and earlier versions"
      }
    ]
  }
]

EPSS

0.001

Percentile

21.9%

Related for CVELIST:CVE-2023-41712